Câu 24: SPLK-5001: Splunk Certified Cybersecurity Defense Analyst

Splunk Enterprise Security has numerous frameworks to create correlations, integrate threat intelligence, and provide a workflow for investigations. Which framework raises the threat profile of individuals or assets to allow identification of people or devices that perform an unusual amount of suspicious activities?

1. A. Threat Intelligence Framework
2. B. Risk Framework — đáp án hiện tại
3. C. Notable Event Framework
4. D. Asset and Identity Framework